Cross site scripting

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.

CPENameOperatorVersion
umaeq200r1-v
umaeq300r1-v

CPE	Name	Operator	Version
	uma	eq	200r1-v
	uma	eq	300r1-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en